I don't believe that I am accomplishing a task correctly, and I'm afraid that I've opened things up too much.
I have given Subscriber level WordPress users access to CiviCRM: access CiviCRM. This allows access to the Dashboard: https://example.org/civicrm/?page=CiviCRM&q=civicrm/user&reset=1
Once there, then they can see and edit their donations, but only after giving access to CiviContribute: edit contributions.
The Dashboard seems to be a very useful feature, but I feel like I'm giving too much access in the ACL's. With the above scenario, if I have access to the back end of Civi, I can now search for other people and change their contributions also, right? How should I be doing this? I feel like I'm missing something in the documentation, but can't seem to hit the right keywords.
Wordpress 4.2.2, CiviCRM 4.7.3